Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: RN0XLV6VsSPiEXLtg5lnh99E5+gcikCur3Pe/SbIkzM=
Subject key identifier: 71:22:37:0C:3E:CE:AE:4E:BF:00:7E:ED:85:AE:A0:0E:CC:C3:50:11
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019A71B8F882DB0E6C81C705FBA049B2D13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: JUKZkiSOSKSi59Pne0t6MHhK6Bvb0CtaZ/sHweHi7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f8:82:db:0e:6c:81:c7:05:fb:a0:49:b2:d1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=7122370c3eceae4ebf007eed85aea00eccc35011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:33:f5:1b:47:60:b8:67:80:c8:25:1a:26:
1f:86:1b:f0:94:14:de:7c:ca:bd:80:88:e1:e5:7e:
97:f6:43:55:48:4a:89:9a:84:18:26:f0:10:8b:8c:
e4:f1:25:e9:67:58:4a:1a:59:ba:7a:7c:1e:a6:f4:
12:e2:a4:ea:43:13:37:b9:5f:95:86:ae:83:b4:aa:
4d:32:52:60:3c:b9:59:34:d1:08:ee:f5:e0:28:ce:
2f:66:a5:b7:8f:28:d7:d3:96:f3:99:bd:19:cd:a5:
a5:bf:94:73:6f:86:2d:e1:67:62:17:a0:b3:68:8a:
d1:a1:b1:4f:2a:f9:81:40:9f:13:e3:d6:41:9e:81:
ac:1f:93:76:f7:68:35:7e:c7:6c:ff:7f:c0:7e:84:
2d:1c:bc:78:e8:35:db:c5:87:27:75:40:e0:02:77:
cd:1b:c9:06:a0:33:8e:eb:d2:19:95:87:bd:82:12:
5c:66:f9:96:5c:9d:63:00:5d:90:00:62:df:61:03:
d4:a1:e4:d5:3d:30:a6:b6:ad:07:b8:74:68:36:83:
70:3d:54:14:37:ee:2a:3a:2c:97:ac:54:e8:d8:13:
db:d6:32:a6:ba:ee:24:66:46:1f:76:51:84:9e:3f:
99:d5:09:44:7a:35:cb:42:f0:f8:f8:b7:24:e5:72:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:37:0C:3E:CE:AE:4E:BF:00:7E:ED:85:AE:A0:0E:CC:C3:50:11
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:43:7c:e3:98:d8:ad:a0:4b:df:b0:05:38:7f:bb:b5:5e:b8:
c9:20:63:a8:03:b3:78:d6:ba:50:1b:53:1e:cf:8a:d9:04:b7:
0c:b1:f9:e4:03:3e:25:06:a1:17:f5:1a:bd:c0:18:27:6b:79:
00:f2:aa:73:58:28:1c:5f:39:6f:50:e0:b9:ae:36:61:b8:e3:
74:29:77:84:6e:45:58:16:47:99:a3:f5:15:e0:9f:a6:a6:59:
70:69:f0:1f:0f:29:9f:8d:68:ca:b9:e3:90:0a:f6:47:4e:14:
a6:46:06:72:be:d7:ad:27:1d:79:d9:47:63:aa:fd:5c:21:b2:
ee:27:24:5a:c3:64:00:dc:31:62:fa:cd:04:97:fe:70:02:98:
22:35:ce:a3:33:0e:a0:95:55:a7:3d:1d:ba:bc:d1:18:c3:e3:
75:0a:36:7a:47:1f:49:0e:ab:3c:a7:a2:2c:cf:42:4d:a9:93:
79:b7:54:f8:59:32:55:a0:c9:30:79:f5:77:fd:f0:07:e4:75:
5c:66:54:17:60:e6:79:21:c6:e3:5d:00:bb:c3:f6:cf:2c:cb:
66:29:ff:e6:48:de:27:03:2d:35:ce:4c:83:39:3e:29:8d:ab:
c7:11:64:3a:7f:14:9d:14:89:11:53:d4:b2:74:31:db:2b:48:
5f:be:65:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPiC2w5sgccF+6BJstE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjUxMTExMDcwMjE4WhcNMjUxMTEyMDcwMjE4WjAzMTEwLwYDVQQD
Eyg3MTIyMzcwYzNlY2VhZTRlYmYwMDdlZWQ4NWFlYTAwZWNjYzM1MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssgz9RtHYLhngMglGiYfhhvwlBTe
fMq9gIjh5X6X9kNVSEqJmoQYJvAQi4zk8SXpZ1hKGlm6enwepvQS4qTqQxM3uV+V
hq6DtKpNMlJgPLlZNNEI7vXgKM4vZqW3jyjX05bzmb0ZzaWlv5Rzb4Yt4WdiF6Cz
aIrRobFPKvmBQJ8T49ZBnoGsH5N292g1fsds/3/AfoQtHLx46DXbxYcndUDgAnfN
G8kGoDOO69IZlYe9ghJcZvmWXJ1jAF2QAGLfYQPUoeTVPTCmtq0HuHRoNoNwPVQU
N+4qOiyXrFTo2BPb1jKmuu4kZkYfdlGEnj+Z1QlEejXLQvD4+Lck5XJW7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEiNww+zq5OvwB+7YWuoA7Mw1ARMB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUN845jY
raBL37AFOH+7tV64ySBjqAOzeNa6UBtTHs+K2QS3DLH55AM+JQahF/UavcAYJ2t5
APKqc1goHF85b1Dgua42YbjjdCl3hG5FWBZHmaP1FeCfpqZZcGnwHw8pn41oyrnj
kAr2R04UpkYGcr7XrScdedlHY6r9XCGy7ickWsNkANwxYvrNBJf+cAKYIjXOozMO
oJVVpz0durzRGMPjdQo2ekcfSQ6rPKeiLM9CTamTebdU+FkyVaDJMHn1d/3wB+R1
XGZUF2DmeSHG410Au8P2zyzLZin/5kjeJwMtNc5Mgzk+KY2rxxFkOn8UnRSJEVPU
snQx2ytIX75lQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:00 2025 by rpki-client